131.es

Issued by R3

About this certificate

This digital certificate with serial number 03:91:4a:74:8e:37:53:47:c2:14:68:43:90:0b:85:68:5b:c3 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=131.es

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:91:4a:74:8e:37:53:47:c2:14:68:43:90:0b:85:68:5b:c3
Serial Number (int): 310776769061425977619546456457937376795587
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 7b:8a:dd:28:77:a8:b4:b0:f9:ee:d8:a2:14:0b:7b:42:ad:09:4a:2d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 5f:b6:b2:6c:e5:0f:c2:9b:92:64:89:8c:34:03:1e:61:90:e5:5e:5c
Fingerprint (sha256): 0c:0a:a0:c9:cd:e4:b6:5e:20:14:f2:28:7e:78:6b:17:70:0b:92:b2:32:72:0e:cc:b2:39:3d:ff:e7:4e:fb:d4

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate 131.es

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 131.es

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.131.es
*.aaryafun.com
*.alianzagraficadigital.com
*.almacenbarcelona.com
*.ampermeter.de
*.apcla.org
*.appsavanzadas.com
*.arthsarthipunezp.org
*.biewer-terrier.de
*.billschelly.net
*.birdymen334.com
*.blvdart.com
*.coach-outlet.us
*.dawyeesilverlake.com
*.designonabin.com
*.djyy25.top
*.eljamondegranvia.com
*.evabus.com
*.fountainhomes.com
*.frauenklamotten.de
*.funtests.de
*.gigabytes.com.au
*.goconnect.cc
*.grehogar.com
*.henodluxuryhomes.com
*.immmbilien.de
*.interclinica.com.br
*.lapretina.art
*.launchsupernewesttheproduct.vip
*.ldnresearch.org
*.mesoffresdelonghi.com
*.mingun.de
*.music20book.com
*.newsoftworld.com
*.openlibrery.org
*.outfittrey.de
*.pausenzeiten.de
*.raiseyourfund.biz
*.servoplex.co
*.shoots.com.au
*.shop1688.co
*.skinpigmentation.com.au
*.ssautosalvage.co.uk
*.thisiswander.com
*.thrombosen.de
*.wwwbenenden.co.uk
*.xn--tpferofen-07a.de
*.xn--wortbersetzung-jsb.de
*.yadongkorean.org
*.zoozabota.info
131.es
aaryafun.com
alianzagraficadigital.com
almacenbarcelona.com
ampermeter.de
apcla.org
appsavanzadas.com
arthsarthipunezp.org
biewer-terrier.de
billschelly.net
birdymen334.com
blvdart.com
coach-outlet.us
dawyeesilverlake.com
designonabin.com
djyy25.top
eljamondegranvia.com
evabus.com
fountainhomes.com
frauenklamotten.de
funtests.de
gigabytes.com.au
goconnect.cc
grehogar.com
henodluxuryhomes.com
immmbilien.de
interclinica.com.br
lapretina.art
launchsupernewesttheproduct.vip
ldnresearch.org
mesoffresdelonghi.com
mingun.de
music20book.com
newsoftworld.com
openlibrery.org
outfittrey.de
pausenzeiten.de
raiseyourfund.biz
servoplex.co
shoots.com.au
shop1688.co
skinpigmentation.com.au
ssautosalvage.co.uk
thisiswander.com
thrombosen.de
wwwbenenden.co.uk
xn--tpferofen-07a.de
xn--wortbersetzung-jsb.de
yadongkorean.org
zoozabota.info

Other certificates including the domain name 131.es

(limited to 100 certificates)
131.es
131.es
131.es
131.es
131.es
fundraisers.com.au
131.es
131.es
131.es
commodityprice.com.au
131.es
131.es
praying.com.au

Certificate

The complete raw certificate details for 131.es in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 310776769061425977619546456457937376795587
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-07 20:19:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-05 20:19:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '131.es'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 807603853871407816873902957474922073000981680711889281155929683865317190530299981054311885144479485754324446226761168003064392066237291273304390860165807053999931482501182244271693249327564434189791064962511431386915963149766173255552811468926676626957871234493875513255484995107877675164289362000201717166455091510472337000864527323600486529345562934732873123873001792505450904881822685257038245223317913211639862089127584710302230943626179064855133276615750747028447197287031064914770279280919027868350556112460663420617992226632305936853866718219013241017103353340368078881974321997620941513094895423508541024838726406060773066134403870631081449466744055922581567825935923234709023884423968443958302947734473996190897194538681334842586616107182651178539821486894247811828358023318122440449627337277187005563313428677515208039682000887984495571525040360390639637043837840690088832268172563866362633599072390243699486237944058693436915990851765910490538846224880090420919196336669354115234178170454100865597293351707118155045991215783047729705285372941336053806465478006511270523319080219834085334952120339981627295205244768014474097787572241838202973784260995810838109736899366192949723499192921622787070952033774968912122236225469
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7b8add2877a8b4b0f9eed8a2140b7b42ad094a2d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1880 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.131.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aaryafun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alianzagraficadigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.almacenbarcelona.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ampermeter.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apcla.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.appsavanzadas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arthsarthipunezp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.biewer-terrier.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.billschelly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.birdymen334.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blvdart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coach-outlet.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dawyeesilverlake.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.designonabin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.djyy25.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eljamondegranvia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.evabus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fountainhomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.frauenklamotten.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.funtests.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gigabytes.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goconnect.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grehogar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.henodluxuryhomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.immmbilien.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.interclinica.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lapretina.art'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.launchsupernewesttheproduct.vip'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ldnresearch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mesoffresdelonghi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mingun.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.music20book.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newsoftworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.openlibrery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.outfittrey.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pausenzeiten.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.raiseyourfund.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.servoplex.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shoots.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shop1688.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skinpigmentation.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ssautosalvage.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thisiswander.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thrombosen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwbenenden.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--tpferofen-07a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--wortbersetzung-jsb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yadongkorean.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zoozabota.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '131.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aaryafun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alianzagraficadigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'almacenbarcelona.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ampermeter.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apcla.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appsavanzadas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arthsarthipunezp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biewer-terrier.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billschelly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'birdymen334.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blvdart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coach-outlet.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dawyeesilverlake.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'designonabin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'djyy25.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eljamondegranvia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evabus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fountainhomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frauenklamotten.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'funtests.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gigabytes.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goconnect.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grehogar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'henodluxuryhomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immmbilien.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interclinica.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lapretina.art'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'launchsupernewesttheproduct.vip'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ldnresearch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mesoffresdelonghi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mingun.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'music20book.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsoftworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openlibrery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outfittrey.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pausenzeiten.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raiseyourfund.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servoplex.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoots.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop1688.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skinpigmentation.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssautosalvage.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thisiswander.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thrombosen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwbenenden.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--tpferofen-07a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--wortbersetzung-jsb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yadongkorean.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zoozabota.info'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e1ac903e8000004030047304502203d800cb9d3304536c7bd4f3b72656728888c4b9f8b51c78e86b812daff4ad4f402210081af3c750ef63b9f073e3f2c5033f1bfb95354f026d2e9382f15e37a5f3fcf1c007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e1ac904050000040300473045022100ec6f9405ba282103b66265d82eb28988962cacb4194b899116407f295c34452b02204b4acf35268d257923df28307bdeba39aea439344d5334eb732094040b0ba859
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00b8196b15832ed3a271cd66ff82b6c9f8d6ffcb52c851c49dbf5b61336ab1e423a1b1d4a0a93d634bc8e9941f574e34560fdea92ab2b264d30c74b88a7de3e702be2b9f31daedef10382903e7286e7e7a034ed25738d559ef4b0cef319e0372548e0feb7237d496dedc98634f30075cc21fd8d1f4480a81005663759b03cd3e9f13e57fed3d96a8d01b1850a95398a29e990f30016908c43ba391ac5083c6f4856412b4fa8134cd4b1ba0e5478ada96c59fd7b44ced2c86fe84eb148c289b04cf125c2258e9422e4006568d279fc1ea7d54224a6982c5effc375ca92a9f6e477ec2a6268408e830ed150272ad5a70837b303d46e1ec3ab8ac416a2b6677de518f